Rtsp Articles on TUAW - The Unofficial Apple Weblog

Another zero-day exploit for QuickTime

by Michael Rose (Jan 11th, 2008)

US-CERT and Information Week are reporting a new vulnerability in QuickTime's handling of RTSP streams, which has been demonstrated to crash QuickTime Player on Windows and may also affect the Mac version. See the writeup by researcher Luigi Auriemma, who first announced the flaw. Unlike the RTSP ...

QuickTime exploit in the wild, demoed on Second Life

by Michael Rose (Dec 5th, 2007)

As reported, the RTSP vulnerability in QuickTime was accompanied by working exploit code, accelerating the process of malefactors and miscreants turning it into actual malicious payloads. Symantec & other outlets have since reported that the QuickTime exploit has been seen in the wild; the ...

Zero-day exploit in QuickTime could hit Win iTunes users

by Michael Rose (Nov 28th, 2007)

Over the weekend, security researchers announced a vulnerability in QuickTime's handling of the RTSP streaming protocol, and Windows-only exploit code is already circulating. The flaw allows attackers to craft specially formatted RTSP responses that cause a buffer overflow, and as a result they can ...

Buy an ad here